Oracle Linux 8 : libreoffice (ELSA-2026-35839)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-35839 advisory. - Fix CVE-2026-8357 buffer overflow in Calc formula compiler with formulas composed entirely of open tokens Tenable has extracted the preceding description blo...

Oracle Linux 10 : glibc (ELSA-2026-500006)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500006 advisory. - resolv: Check hostname for validity CVE-2026-4438 - resolv: Count records correctly CVE-2026-4437 Tenable has extracted the preceding description...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500004)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500004 advisory. - xfrm: hold dev ref until after transportfinish NFHOOK Qi Tang Orabug: 39727259 CVE-2026-31663 - KVM: arm64: vgic-its: Drop the translation cac...

Oracle Linux 8 : go-toolset:ol8 (ELSA-2026-38995)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38995 advisory. delve 1.26.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.26.1-1 - Update to Delve 1.26.1 - Related: RHEL-183712 golang...

Oracle Linux 9 : cups (ELSA-2026-39316)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39316 advisory. 1:2.3.3op2-39 - RHEL-177957 CVE-2026-34980 cups: control character injection in option values Tenable has extracted the preceding description block directly fr...

Oracle Linux 10 : kernel (ELSA-2026-19074)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19074 advisory. - xfrm: esp: avoid in-place decrypt on shared skb frags CKI Backport Bot RHEL-174546 CVE-2026-43284 - crypto: authencesn - Do not place hiseq at end ...

Oracle Linux 10 : unbound (ELSA-2026-18556)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18556 advisory. 1.24.2-7 - Recreate configure unconditionally 1.24.2-6 - Add byacc into BuildRequires 1.24.2-5 - Change the default of tls-use-system-policy-versions...

Oracle Linux 7 : host-metering (ELSA-2026-16101)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-16101 advisory. 1.2.0-4.0.1 - Rebuild with new go-toolset-1.19-golang to fix CVE-2026-32283 Orabug: 39352233 Tenable has extracted the preceding description block directly fro...

Oracle Linux 10 : postgresql16 (ELSA-2026-19010)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19010 advisory. 16.13-1.0.1 - Replace upstream reference Orabug: 37044148 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 9 : kernel (ELSA-2026-36645)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36645 advisory. - eventpoll: fix epremove struct eventpoll / struct file UAF Ian Kent RHEL-180773 CVE-2026-46242 - eventpoll: defer struct eventpoll free to RCU grace...

Oracle Linux 10 : glibc (ELSA-2026-19061)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19061 advisory. - resolv: Check hostname for validity CVE-2026-4438 - resolv: Count records correctly CVE-2026-4437 Tenable has extracted the preceding description...

Oracle Linux 7 : 389-ds-base (ELSA-2026-26453)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-26453 advisory. - Security fix for CVE-2026-9064 Orabug: 39570202 - Security fix for CVE-2025-14905 Orabug: 39146844 Tenable has extracted the preceding description block...

Oracle Linux 10 : postgresql18 (ELSA-2026-19009)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19009 advisory. - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005:...

Oracle Linux 9 : libreoffice (ELSA-2026-36832)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36832 advisory. - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation Tenable has extracted the preceding description block directly fro...

Oracle Linux 8 : xorg-x11-server-Xwayland (ELSA-2026-38488)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-38488 advisory. 21.1.3-20.3 - CVE fix for: CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191516 Tenable has extracted the preceding description block...

go-toolset:ol8 security, bug fix, and enhancement update

delve 1.26.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.26.1-1 - Update to Delve 1.26.1 - Related: RHEL-183712 golang 1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var - Backported from OL9u7 - Resolves: OLDIS-53586 1.26.5-1 - Update to Go 1.26.5 fips-1 ...

kernel security, bug fix, and enhancement update

4.18.0-553.141.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 9 : xorg-x11-server (ELSA-2026-38486)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38486 advisory. 1.20.11-34.3 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 Tenable has extracted the preceding description block...

Oracle Linux 8 : gstreamer1-plugins-bad-free (ELSA-2026-37130)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-37130 advisory. - Fix for CVE-2026-52720: librfb framebuffer update rectangle validation Resolves: RHEL-184455 Tenable has extracted the preceding description block...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-50388)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50388 advisory. - rtmutex: Use waiter::task instead of current in removewaiter Keenan Dong Orabug: 39706958 CVE-2026-43499 - net/sched: fix pedit partial COW leading to pa...